Re: [mccode] donator day market for v2
So now you have someone with a credit card buying more days than he needs for himself, and selling them for game $$ to someone you can't get to pull out a credit card anyway. I see gain, not loss.
Days are still a commodity, no matter who buys them, the more people you get using them up, the better.
Second:
After:
function dday_buy(){
global $db,$ir,$c,$userid,$h,$set;
You need to add:
$_GET['ID']=abs((int) $_GET['ID']);
Otherwise you are open to mySQL injections.
Third:
To prevent your users from posting all their days just before midnight, I made ours require they keep at least 1
day for themselves. I guess they could post several days if they were not going to be around to use them, but....